TWO-COVER DESCENT ON HYPERELLIPTIC CURVES 



NILS BRUIN AND MICHAEL STOLL 

Abstract. We describe an algorithm that determines a set of unramified covers of a given hyper- 
elliptic curve, with the property that any rational point will lift to one of the covers. In particular, 
if the algorithm returns an empty set, then the hyperelliptic curve has no rational points. This pro- 
vides a relatively efficiently tested criterion for solvability of hyperelliptic curves. We also discuss 
applications of this algorithm to curves of genus 1 and to curves with rational points. 



1. Introduction 

In this paper we consider the problem of deciding whether an algebraic curve C over a number 
field k has any fc-rational points. We assume that C is complete and non-singular. A necessary 
condition for C(k) to be non-empty is that C has a rational point over every extension of k. In 
particular, for any place v of k, the curve C should have a rational point over the completion k v of 
k at v. 

For curves of genus 0, this is sufficient as well: if a genus curve C has a rational point over every 
completion k v of k, then C(k) is non-empty. A fc^-point of C is referred to as a local point of C at v 
and a fc-point of C is called a global point. For a genus curve C, having a local point everywhere 
(at all places of k) implies having a global point. Genus curves are said to obey the local-to-global 
principle for points. 

The local-to-global principle is important from a computational point of view. One can decide in 
finite time whether a curve has points everywhere locally: for any curve C over a number field k, 
the set C(k v ) is nonempty for all places v outside an explicitly determinable finite set S. For the 
remaining places v £ 5, one can decide in finite time if C{k v ) is non-empty as well. See [4] for some 
algorithms, in particular a quite efficient algorithm for hyperelliptic curves. Thus, whether a curve 
has points everywhere locally can actually be decided in finite time. 

It is well known that curves of genus greater than do not always obey the local-to-global 
principle. Most proofs of this phenomenon are based on the fact that curves of positive genus can 
have unramified Galois-covers. In fact, if a curve C of positive genus has a rational point P, then the 
Abel-Jacobi map allows us to consider C as a non-singular subvariety of its Jacobian variety Jac(C). 
Since the map n : Jac(C) — > Jac(C),C} i— » nQ + P is unramified, the pull-back 7r*(C) yields an 
unramified cover of C that has a rational point mapping to P. More generally, an n-cover of C is a 
cover that is isomorphic to one of this form over an algebraic closure k of k. Thus, if one can show 
that an algebraic curve C does not have n-covers that have a rational point, then it follows that C 
has no rational points. Even though C may have points everywhere locally, it is possible that on 
every cover, rational points can be ruled out by local conditions. 

The major content of this paper is inspired by the following well-known observation. Let <fi : D — > 
C be an unramified cover of a curve C over a number field k that is Galois over an algebraic closure 
k of k. It is a standard fact, going back to Chevalley and Weil [12] that there is a finite collection of 
twists <f>s '■ Ds — ► C of the given cover qb such that any rational point on C has a rational pre-image 
on one of the covers Ds. We call such a set of covers a covering collection. Furthermore, at least in 
principle, such a finite collection of covers is explicitly computable given a cover 4> : D — > C '. 

Thus, one approach for testing solvability of a curve C that has points everywhere locally is: 
(1) Fix n > 2. 
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(2) Construct an ro-cover D of C. If no such covers exist, then C(k) is empty. 

(3) Determine a covering collection associated to D — ► C . 

(4) Test each member of the covering collection for local solvability. If none of the members has 
points everywhere locally then no curve in the covering collection has any rational points, 
and C has no rational points either. 

Each of the covers might have a local obstruction to having rational points, while the underlying 
curve C has none. Thus the procedure sketched above can actually prove that a curve does not obey 
the local-to-global principle for points. See [35] for a detailed discussion, including the theoretical 
background and some links to the Brauer-Manin obstruction against rational points. 

In the present article we discuss a relatively efficient way of carrying out the procedure sketched 
above for hyperelliptic curves. We consider unramified covers D/C over k such that for an algebraic 
closure k of k we have that Au%(£)/C) ~ Jac(C)[2](fc) as Gal(fc//c)-modules. These are exactly the 
two-covers of C over k. We write Cov*- 2 -* (C/k) for the set of isomorphism classes of two-covers of C 
over k. 

Our claim to efficiency stems from the fact that we avoid explicitly constructing a covering 
collection. In fact, the method can be described without any reference to unramified covers, see 
Section [21 Instead, we determine an abstract object that (almost) classifies the isomorphism classes 
of two-covers. See Section [3] for how to construct the covers explicitly from the information provided 
by the algorithm. 

We observe that for any field extension L/k there is a well-defined map C(L) -> Cov (2) (C/L) 
by sending a point to the two-cover that has an L-rational point above it. For completions k v /k, 
we show that this map is locally constant: If two points Pi,Pi € C(k v ) lie sufficiently close, then 
they lift to the same two-cover. This allows us to explicitly compute the fc^-isomorphism classes of 
two-covers that have points locally at v. We can then piece together this information to obtain the 
global isomorphism classes of two-covers that have points everywhere locally. 

We define Sel^(C/fc) C Cov^ 2 \C/k) to be the set of everywhere locally solvable two-covers of 

(2) 

C. The algorithm computes a related object, that we denote by Sel^ (C/fc), which is a quotient of 
Sev- 2 '(C/k). It classifies everywhere locally solvable two-covers, up to an easily understood equiv- 
alence. Since any curve C with a rational point admits a globally and hence everywhere locally 
solvable two-cover, Se\\?l c (C/k) = implies that C(k) is empty. 

( 2) 

A priori, the elements of Self a £ c (C/fc) represent two-covers that have a model of a certain form 
(described in Section [3]) , but we will prove that every two-cover that has points everywhere locally 
does have such a model, see Theorem 13.41 below. 

In Section [7] we illustrate how the algorithm presented in Sections 2][5j and [5] can be used to show 
that a hyperelliptic curve has no rational points. This method was also used in a large scale project 
[5] to determine the solvability of all genus 2 curves with a model of the form 

V 2 = fox 6 + ■ ■ ■ + fo, where /, € {-3, -2, -1, 0, 1, 2, 3} for i = 0, . . . , 6. 

In Section [TO] we describe some statistics that illustrate how frequently one would expect that 
Self^ e (C/fc) = for curves of genus 2. 

Section[5]shows how information obtained on Sel| 2 ^ e (C/A:) can be used for determining the rational 
points on curves if C(k) is non-empty. This complements Chabauty-methods as described in [2"ll3"lll5|. 
In earlier articles, the selection of the covers requiring further attention was done by ad-hoc methods. 
Here we describe a systematic and relatively efficient approach. 

In Section [§] we describe the results of applying the method to curves of genus 1. We find 
(unsurprisingly) that we recover well-known algorithms for performing 2-descents and second 2- 
descents on elliptic curves [TOJ[T6]. A practical benefit of this observation is that to our knowledge, 
nobody has bothered to implement second two-descent over arbitrary number fields, whereas our 
implementation in MAGMA pQ (which is available for download at [S]) can immediately be used. 
We give an example by exhibiting an elliptic curve over Q(\/2) with a non-trivial Tate-Shafarevich 
group. 
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2. Definition of the fake 2-Selmer group 

Let k be a field of characteristic and let C be a non-singular projective hyperelliptic curve of 
genus g over k, given by the affine model 

C : y 2 — f„x n + ■ ■ ■ + fo = f{x), where / is square-free. 

If n can be chosen to be odd, then C has a rational Weierstrass point. This is a special situation 
and, by not placing any Weierstrass point over x = oo, we see that we lose no generality by assuming 
that n is even, in which case n = 2g + 2. In practice, however, computations become considerably 
easier by taking n odd if possible. The construction below can be adapted to accommodate for odd 
n. See Remark 1 2 . 1 1 b elow . 

From here on we assume that n is even unless explicitly stated otherwise. We consider the algebra 

A = k[x]/(f(x)) 

and we write 9 for the image of x in A, so that f(8) — 0. We consider the subset of A* modulo 
squares and scalars (elements of k*) with representatives in A* that have a norm in k* that is equal 
to /„ modulo squares: 

H k = {5 G A*/A* 2 k* : N A/k {5) G f n k* 2 }. 

The set Hk might be empty (but see Question 17. 2p . As we will see, this implies that C has no 
rational points. This follows from the fact that we can define a map C(k) — > Hk- First, we define 
the partial map: 

fi k : C(k) -> H k 
(x,y) i — * x — 9 . 

Here and in the following, we write x — 9 instead of the correct, but pedantic, (x — 9)A* 2 k*\ we 
hope that no confusion will result. This definition of [i does not provide a valid image for any point 
{%\, 0) £ C(k). For any such point, we can write f(x) — (x — xi)f(x) and we define: 

li k ((x 1 ,0)) = (x 1 -9) + f(0). 

Furthermore, if f n E k* 2 then the desingularisation of C has two points, say oo + , oo - above x = oo. 
We define 

M(°o + ) = = fn, 

where f n = 1 modulo k* 2 . 

Remark 2.1. While we lose no generality by assuming that f(x) is of even degree, for computational 
purposes it is often preferable to work with odd degree f(x) as well. We can use the definitions 
above if we replace the definition of Hk by 

H k = {5 e A* /A* 2 : N A/k (S) € f n k* 2 }. 

In this case, there is a unique point oo above x — oo. We define 

M(°o) = fn 

If K is a field containing k (we will consider a number field k with a completion K), the natural 
map A — > A (&k K induces the commutative diagram 

PK 

C(K) »U H K 

If k is a number field and v is a place of k, we write [i kv = £ti>, £tfe = A* an d PK — Pv- For a number 
field k, we define 

Sel^ c (C/fc) = {5 G H k : p v (S) G p v {C{k v )) for all places v of fc} C ff fc . 

It is then clear that fXk(C(k)) C Sel[^ (C//c). In particular, Sel^ c (C/fc) = implies that C does 
not have fc-rational points. 



4 



NILS BRUIN AND MICHAEL STOLL 



3. Geometric interpretation of H k 

In this section we give a geometric and Galois-cohomological interpretation of the set Hk and the 
map /ife we defined in Section [2] The material in this section is not essential for the other sections 
in this text. 

Definition 3.1. Let C be a non-singular curve of genus g over a field k. A non-singular absolutely 
irreducible cover D of C is called a two- cover if D/C is unramified and Galois over a separable 
closure k of k and Aut-r(D/C) ~ (Z/2Z) 29 . We denote the set of isomorphism classes of 2-covers of 
C over k by Cov (2) (C/k). 

This definition is motivated by the fact that if C can be embedded in Jac(C), then such a 
cover can be constructed by taking D to be the pull-back of C along the multiplication-by-two 
morphism [2] : Jac(C) — * Jac(C). Furthermore, over k, all two-covers of C are isomorphic, and 
Aut j(D/C) ~ Jac(C)[2](fc) as Gal(fc/fc)-modules in a canonical way. 

Let C be a curve and suppose that Di, D 2 are two-covers of C over k. Let <j> '■ D\ — > D 2 be an 
isomorphism of C-covers over k. We can associate a Gal(fc/fc)-cocycle to this via 

£: Gal(fc/fc) -> Aut ¥ (£) 2 /C) = Jac(C) [2] (I) 

The cocycle £ is trivial in Jac(C)[2]) precisely if D\ and £>2 are isomorphic as C-covers over 

k. Furthermore, given a cocycle £, one can produce a twist of of a given cover D: 

Theorem 3.2 (gH Chapter X, Theorem 2.2]). If (D-»C)£ Cov (2) (C/fc), i/ien ifte a&oue cora- 
struction gives a bisection Cov {2) {C/k) -> ff^fc, Jac(C)[2]). 

We now interpret the set Hk defined in Section [2] in terms of two-covers. Using the notation from 
the previous section, consider S G A*. There are unique quadratic forms 

Qs,i(u) € k[u , . . .,Un-l] 
such that the identity below holds in A[uo, . . . , u n -{\: 

n-1 

S(u + Ul e+--- + Un _ 1 e™- 1 ) 2 = QsA^W- 

i=0 

We consider the projective variety over k in P n_1 described by 

Ds ■ Q&,2{u) = ■■■ = Qs,n-l(u) = 

This curve Ds is a degree 2™ _1 cover of P 1 via the function 

/ x QsAil) 

Furthermore, if f n N A/k{&) = 1,2 f° r some w € fc, we can define a function 



-^A[u]/fc[u] I J2 U $ 



n-1 



i=0 



(Qm(«))" /2 

which gives us morphisms <fis,±, depending on the choice of v, represented by 

05,± : D S -> C 

(u : • ■ ■ : u n -i) ^ (^(M), ±2/(m)) 

It is proved in [2j,[6] that the cover Ds/C is a two-cover. Furthermore, if 81,62 represent distinct 
classes in Hk, the covers Ds t and Ds 2 are not isomorphic over k. 

For a fixed S, the two morphisms <f>s.+ and show that Ds is a two-cover of C in two ways. 
These are related via the hyperelliptic involution on C, denoted by 

t: C -> C 
(z,y) >-> (x,-y). 

With this notation, we have 05, _ = to 05,+ . 
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The hyperelliptic involution induces a map t* : Cov^ 2 \C/k) — > Cov^ 2 \C/k) via = LO(j>. 

Since elements of P& define two-covers up to t* we have: 

H k C Co V ( 2 >(C/fc)/(i*)- 

Whether i* is the identity depends on whether there exists an isomorphism D — > D over k such that 
the diagram below commutes. 

7 

D'~~ ~~ ^ D 

C 

We do not need it here, but we quote a result from [18] (Thm. 11.3) that characterizes whether l* 
acts trivially on H l {k, Jac(C)[2]). 

Proposition 3.3. Let C be as defined above. Then u* acts trivially on H 1 (k 1 Jac(C)[2]) if and only 
if C has an odd degree Galois invariant and l- symmetric divisor class. A curve C : y 2 = f(x), where 
f is square-free of degree n, has such a divisor class precisely 

• when n is odd, or 

• when n = (mod 4) and f has an odd degree factor, or 

• when n = 2 (mod 4) and f has an odd degree factor or is the product of two quadratically 
conjugate factors. 

If k is a number field, we define the 2-Selmer set of C/k to be the set of everywhere locally 
solvable 2-covers: 

Sel (2) (C*/fc) = {(<£ : D -► C) e Cov (2) (C*/fc) : D(k v ) £ for all places v of fc.j 

We define the fake 2-Selmer set to be the everywhere locally solvable 2-covers of the form D$ : 

SelgL(CA) ^H k nSe\ (2 \c/k)/(n- 
This is consistent with the definition given in Section O if P S C(k) and <5 = /x(P), then D$ has 
a rational point that maps to P. Therefore, if 8 S P& restricts to an element in fJ>k v (C(k v )) for all 
places v of k, then Da has a fc„-rational point for each v. 

This argument also shows that if Hf~ is empty then C{k) is empty. More precisely, the set Hk 
classifies two-covers of the form D$, so if it is empty, this represents an obstruction against the 
existence of a two-cover of this specific form. We will now show that every two-cover D — » C such 
that D has points everywhere locally can be realized as a cover D$. 

Theorem 3.4. Let <p : D — > C be a two-cover such that D has points everywhere locally. Then there 

(21 

is 6 £ Self I (C/k) such that </> is isomorphic to <f>s.+ or (f>s.-- In particular, 

Seti(C/k) = Se\( 2 \C/k)/{n- 

Proof. We first note that all divisors (f>*(P) on D, where P is a Weierstrass point on C, are linearly 
equivalent. This is a geometric statement, so we can assume k to be algebraically closed; then 
<j) ~ 4>i,+, and on D\, it is easy to see that the divisors in question all are hyperplane sections (for 
example, if P = (9,0), then 4>*(P) is given by the vanishing of uq + 9u\ + ■ ■ ■ + 6 n ^ 1 u n -i). Let 
us denote the class of all these divisors by W. Since the Galois action maps Weierstrass points to 
Weierstrass points, W is defined over k. 

The assumption that D has points everywhere locally implies that every fc-rational divisor class 
contains a fc-rational divisor. So W induces a projective embedding D — * such that the pull- 
backs of Weierstrass points on C are hyperplane sections. Now consider the function x — 6 £ A(C). 
Its pull-back to D has divisor 2cf>*((9, 0)) — V, where V is a fc-rational effective divisor whose class 
is twice that of a hyperplane section. In terms of the coordinates on (projective A^-space over 
the etale algebra A), this means that we can write 

£ 2 

(x-9)o<p = 6— 

q 
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with a constant 6 £ A* , a linear form £ with coefficients in A, and a quadratic form q with coefficients 
in k. Taking norms (recall that fuN^i^x — = 2/ 2 )j we nn d that 



„n/2 



so that (5 represents an element of . 
We can write the linear form £ as 



£i9 



where the li are linear forms with coefficients in k. We obtain a map D — > £>«5 C P™ 1 , given by 
(£q : ■ ■ ■ : £ n —i), which is the desired isomorphism. □ 

4. Computing the local image of n at non-archimedean places 

In this section, we assume that k is a non-archimedian complete local field of characteristic 0. We 
write O for the ring of integers inside k, ord for the discrete valuation and |.| for the absolute value 
on k. Furthermore tt will be a uniformizer. We will assume that 0/(ir) is finite of characteristic p 
and that R C O is a complete set of representatives for O / (tt) . 

Let f(x) £ 0[x] be a square-free polynomial and suppose that f(x) — gi(x) ■ ■ ■ g m (x) is a fac- 
torisation into irreducible polynomials with gi £ 0[x\. If we write Li = k(9i) = k[x}/ (gi(x)) then 
A ~ L x ® ■ ■ ■ ® L m and 

A* I A* 2 ~ (Ll/Lf) x ... x (L r *„/^). 
The following definitions and lemma allow us to find /i(C(fc)) without computation in many cases. 

Definition 4.1. Let I be a local field and let 5 £ L* . We say the class of S in L* / L* 2 is unramified 
if the extension L(\/$)/L is unramified. If the residue characteristic p is odd, this just means that 
ord£(<5) is even. 

Definition 4.2. Let A be an etale algebra over a local field k and suppose that A ~ L\ • • • © L m 
is a decomposition of L into irreducible algebras. Then we say that S £ A* /A* 2 is unramified if the 
image of 5 in each of L* / L* 2 is unramified. 

We say that an element of A*/A* 2 k* is unramified if it can be represented by an unramified 
8 £ A* I A* 2 . 

Lemma 4.3. Suppose that f £ 0[x], that the residue characteristic p is odd, that ord/c(disc(/)) < 1 
and that the leading coefficient of f is a unit in O. Then fi(C(k)) consists of unramified elements. 
Furthermore, if in addition q = #0 / (tt) satisfies 

V q + J_ >2 (2 2 o(g-l) + l) 

then /j(C(k)) consists exactly of the unramified elements of C A*/A* 2 k*. 

(Compare Prop. 5.10 in [21] for a similar statement in the context of 2-descent on the Jacobian 
of C.) 

Proof. Let L/k be a splitting field of / and let 9i,...,9 n be the roots of /. Since the leading 
coefficient of / is a unit, we have 0j £ O^. We extend ord = ord^ to L by writing ord(y) = 
^p^yordi(y), where e(L/k) is the ramification index of L/k. 

First we prove that e(L/k) < 2. Note that, since ord(disc(/)) < 1, we have e(k[9i]/k) < 2. 
If e(k[0i]/k) = 1 for all i, then e(L/k) = 1. Therefore, suppose that e(fc[6»i]/fc) = 2. Write 
f(x) = (x-9 1 )f(x). Then 

disc(/)=disc(/)(/> 1 )) 2 
If e(fc[0i]/jfe) = 2 then ord(/(0i)) > 0, so in fact ord(/(0i)) > \. But then, from 

1 = ord(disc(/)) = ord(disc(/)) + 2ord(/(0)) 

it follows that ord(disc(/)) = and hence that L/k[9i] is unramified for i > 2, so e(L/k) < 2 and 
ord takes values in |Z on L* . 
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This allows us to conclude that the roots of f(x) are p-adically widely spaced. From 
1 > ord(disc(/)) = ord(j^(6' i - 9j) 2 ) = 2^ord(^ - %) 



i<j i<j 

it follows that ord(6*i — 9j) = for all but at most one pair {i, j}, say {1, 2}. If L/k is ramified then 
we have ord(6>i — 62) = \ and {x — 6\){x — 82) is an irreducible quadratic factor of f(x) over k. 

We now consider a point {x,y) 6 C{k) with x £ O. Since f(x) is a square in k and the leading 
coefficient is a unit, we have that 

n 

2 I ^ordOr-^) 

Note, however, that ord(6>i — Oj) > min(ord(x — 8i), ord(x — Oj)). A priori, we could still have 
ord(x — 61) = ord(a; — 8 2 ) = \ (note that these orders must be equal because x — 8\ and x — 8 2 are 
Galois-conjugate) and ord(a; — = for i = 3, . . . , n, but then f{x) has odd valuation and hence is 
not a square in k. It follows that ord(a; — 8i) = holds for all but at most one i and therefore that 
all of ord(x — 8i) are even. This proves that /i(x,y) is unramified for any point (x, y) € C{k) with 
x G O. 

li x ^ O, then ord(x) < < ord(#i) for all i, so (since p is odd) (x — Qi)/x is a square in k(0i). 
So fJ,(x,y) is in A* 2 fc*, i.e., trivial. It follows that the image /j,(C(kj) C Hk is unramified. 

Conversely, if ord(disc(/)) = and 5 G is unramified, then as defined in Section [3] can be 
presented by a model with good reduction (by taking S to be a unit). Since Ds is an unramified 
cover of degree 2 2g over a genus g curve C, we can compute using the Riemann-Hurwitz formula 
that 

genus(L>,5) = 2"~ 3 (n - 4) + 1 = 2 29 {g - 1) + 1. 
The Weil bounds for the number of points on a nonsingular curve over a finite field of cardinality q 
imply that if q satisfies the inequality stated in the lemma, then the reduction of Ds has a nonsingular 
point. Hensel's lifting theorem tells us that D$(k) is non-empty and therefore that S G /J,(C(k)). 

If ord(disc(/)) — 1 and 5 £ Hk is unramified, we claim that the reduction Ds of Ds is a singular 
curve of genus 2 2g ~ 2 (2g — 3) + 1, with a unique singularity at which 2 2g ~ 1 branches meet. If the 
desingularization of Ds has more than 2 2s_1 points, then Ds must have a non-singular point, so via 
Hensel's lemma, Ds(k) is non-empty and S G /x(C(fc)). 

Again, from the Weil bounds it follows that this is the case if 

^ + _ >2 ( 2 2 fl -2 (2ff _3 ) + l) + __ 

It is straightforward to check that for g > 0, this is a weaker condition than the one stated in the 
lemma. 

We now prove the claim. By taking S to be a unit, we see that we can construct Ds by applying 
the construction of Ds over the residue class field ¥ — O/ (tt) . The reduction of / has a unique 
double root in F and otherwise simple roots in an algebraic closure of F. We can assume the double 
root to be at x — 0. Since the statement is geometric, we assume that F is algebraically closed. Let 
62, ■ ■ ■ , 8 n -i be the simple roots. We obtain equations defining Ds by eliminating X and Z from the 
following system 

X = 5 z 2 , -Z = z (Siz + 2S zi) 

X-6 j Z = S j z 2 , je{2 n-l}. 

Here the first pair of equations is obtained from the component F[x]/(a; 2 ) of the algebra ¥[x]/(f(x)) 
in the following way: if t is the image of x in F[a;]/(a; 2 ), we write elements of this algebra in the form 
a + ait. We get the first two equations by setting 

X-Zt= (S Q + S 1 t)(z + Zl t) 2 

and comparing coefficients. 

Substituting the expressions for X and Z into the second set of equations, we obtain 

zo(SqZo + 0j(5 1 z + 28 zi)) = S^z 2 , j G {2, . . . , n - 1} . 



8 



NILS BRUIN AND MICHAEL STOLL 



It can be easily checked that the only singular point of this curve is where all variables but z\ vanish. 
Projecting away from this point, we obtain a smooth curve in P™ -2 that is the complete intersection 
of n — 3 = 2g — 1 quadrics and therefore has genus 2 2ff ~ 2 (2g — 3) + 1. Since (away from = 0) we 
can reconstruct Z\ from the remaining coordinates, this projection is a birational map, hence the 
(geometric) genus of D$ is as given. The points on the smooth model that map to the singularity 
on Dg have zo — (this is where the function Z\/zq is not defined on the smooth model), and it can 
be checked that there are exactly 2 2g ~ 1 = 2™ -3 such poins (zq = 0, and the ratios of the squares of 
the other n — 2 coordinates are fixed and nonzero). Hence the smooth points of D$ are in bijection 
with the remaining points of the smooth model. 

See also [H Section 3.1] for a more in-depth discussion of this model of Ds and [B] for a charac- 
terisation of Ds as a maximal elementary 2-cover of P 1 , unramified outside {9\, . . . , 9 n }. □ 

In other cases, when a prime divides the discriminant of / more than once, the residue field is 
too small or the leading coefficient of / is not a unit or k has even residue characteristic, we have to 
do some computations to find the image of fi. In principle, one could construct Hk as a finite set, 
enumerate all Ds and test each of these for fc-rational points. We present a more efficient algorithm 
that instead enumerates points from C(k) up to some sufficient precision. 

Computational models for complete local fields usually consist of computing in the finite ring 
0/n e for some sufficiently large e, which is usually referred to as the precision. The following 
definition allows us to elegantly state precision bounds. The variable e is an indeterminate. 

ord: 0[e] -> Z 

) ate 1 i— ► minord(aj) 

It follows that 

ord a i x ^j ^ ord a i e ') Ior au x <= 

and hence that if /(a;) G 0[x] and v = ord(f(xi+ir e e) — f(xi)), then the value of/(xi) is determined 
in 0/ir v by the value of x-y in (D/ir e . 

Lemma 4.4. Suppose g(x) £ k[x] is an irreducible polynomial and that for some e £ Z>o and 
xo G O, we have 

ord(g(x + £7r e ) - g(x )) > ord{g(x )) 
Let L = k[0] = k[x]/(g(x)). Then for any x x G x + Tr e+O1 ' d( -^0 we have 

(x o -0)(xi-0) G L* 2 

Proof. (Compare [23], Lemma 6.3.) Using that g(x) = goN L / k {x — 9), where g is the leading 
coefficient of g(x), we have 

Writing ord^ for the valuation on L, we have that ordi(7r) is the ramification index of L/k and that 
With some elementary algebra we see that if x\ G xq + 7r e+ord ( 4 )C' then 

^l^ e 1+7r ord fc (4) + l OLCi *2 

xq - 9 

and hence that (xq — 9)(x\ — 9) is a square in L. □ 

This lemma forms the basis for a recursive algorithm that determines the image of fi for points 
(xi,yi) G C(k), with x\ G xq + n e O. A similar procedure is described in [2H page 270]. There are 
a few differences: 

• we fully describe the algorithm for places with even residue characteristic as well, 

• we do not place extra assumptions on the Newton polygon of f(x), 
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• the polynomial f(x) does not change upon recursion. The algorithm in [24| applies variable 
substitutions to fix). This will usually involve a lot of arithmetic with the polynomial 
coefficients of / to a relatively high 7r-adic precision. We therefore expect that our algorithm 
will run slightly faster than [M], especially for small residue fields. 

We first give an informal outline of the algorithm. We build up the possible X\ € xo + ir e O, one 
7r-adic digit at the time. At each stage, we make sure that f(xi) is indistinguishable from a square 
(step 4 below). After finitely many steps Lemma l4~4l guarantees that the digits we have fixed for x±, 
determine the image of x\ — e L*/L* 2 . We then add that value to the set W, unless x\ lies close 
to the x-coordinate of a Weierstrass point. 

Hence, the purpose of the routine below is not to return a useful value, but to modify a global 
list W such that all values of fi(C(k) n x^ 1 {xq + Tr e O)) outside those corresponding to Weierstrass 
points are appended to W. 

When first called, Go contains the irreducible factors of /. This set gets adjusted upon recursion. 
The parameter Co is an auxiliary parameter that plays a role in keeping track of whether the con- 
ditions of Lemma [4.41 are met when ord(4) ^ 0. Its value is irrelevant if Go contains at least two 
polynomials or at least one polynomial of degree larger than 1. Recall that R is a complete set of 
representatives of 0/(tt) in O. 
define SquareClasses(a;o, e, Go, cq): 

1. for r e R: 

2. x\ := xq + TT e r 

3. vi = ord(/(x 1 )); E 1 := ord(/(x! + e7r e+1 ) - /(a*)) 

4. if E x < vi or (2 | v x and f(xi)/ir vi € (0/tt Ei -' U1 )* 2 ): 

5. Gi := {g € Go : ord^ + e7r e+1 ) - g( Xl )) < ord(g{ Xl ))} 

6. if Gi = or (Gi = {g} and deg(g) = 1): 

7. if Gq^G\\ c\ := ord(4) else ci := c - 1 

8. if ci = 0: 

9. if Gi = 0: Add the class of /i(a;i) to W. 

10. return 

11. call SquareClasses(xi, e+1, G\, c\) 
Explanation: 

ad 1. We split up xq + ir e O into smaller neighbourhoods x\ + ir e+1 

ad 3. Here E\ is the precision to which f(x\) is determined: E\ is the largest integer such that 

j( Xl +^+ l O) Cf(x 1 )+7T E ^0. 

ad 4. We only need to consider neighbourhoods that may contain a point (xi,yi) £ C(k). This 
is only the case if f{x\) is a square up to the precision to which it is determined. The sets 
(0/ir El ~ Vl )* 2 are only needed for 1 < E± — vi < ord(4) + 1 and can be precomputed. 

ad 5. The correctness of this algorithm hinges on Lemma l4~4l We let Gi be the subset of Go for 
which the lemma does not apply yet. 

ad 6. Note that for any path in the recursion, in finitely many steps, the value of any g € Go on 
x\ + ir e+1 (D is determined up to a sufficiently high precision to be distinguished from 0, or 
x\ is a good approximation to the root of exactly one degree 1 element of Go- 

ad 7. Informally, Lemma [4.41 states that the value of g[x\) in L*/L* 2 is determined if at least 
ord(4) 7r-adic digits of x\ beyond the ones needed to distinguish g(x\) from are known. 
Since every recursion in 11 has the effect of fixing another digit, we need a device to count 
ord(4) more iterations. If Gi is different from Go, then we have just gained a digit that helps 
to establish that g[x\) ^ for some G S Go, and hence we should initialize c\ — ord(4), 
to count the full ord(4) digits that still need to be added to x\. Otherwise, we have just 
determined one more step, so we should set c\ = cq — 1. 

ad 8. If Ci = then the conditions of Lemma l4~4l are satisfied for all g G\. If c\ = and gi G\ 
then [x\ — 9i)(x2 — Oi) is a square in L* for all xi S X\ + ir e+1 (D. 
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Therefore, if G\ = 0, then all P G G(fc) with x(P) G x\ + n e+1 have the same image 
for x(P) — 9i in L* / L* 2 and therefore, fj,(P) = x\ — 9 in A* /A* 2 . In addition, we know that 

f(xi) = fol[N Li/k (x 1 -e i ) 

i 

is a square due to the test in step 4. This verifies that such points P do exist and thus that 
x\ — 9 represents an element of fi(C(k)). 

Alternatively, suppose that G\ contains one polynomial, of degree 1. We write G± = 
{gj(x)} with gj(x) = a(x — 9j). For any point P G C(k) with x(P) G xi + ir e+1 0, we have 
that f(x(Pj) is a square. However, since 

f{x) = fo(x - &j)Y[N Li[x]/k[x] (x - 6i) 

and (x(P) — 9i)(xi — 9i) is a square in Li for all i ^ j, we see that the square class of 
x(P)—6j, if non-zero, must be constant too and that all such points P have /x(P) = fj,((9j,0)). 
Therefore, if we take care to record the images of all degree 1 Weierstrass points of C 
beforehand, these points are taken care of. 
ad 11. If the test in step 6 does not hold true, or if C\ ^ then we cannot guarantee that fi is 
constant for all P G C(k) with x(P) G X\ + n e+1 0. In this case, we call the same routine 
again, to refine our search. As remarked for step 6, the condition there will be satisfied after 
finitely many recursion steps and then after at most ord(4) steps, we will have c\ = as 
well. 

define Locallmage(.f): 

1. Let gi g m = f be a factorization into irreducible polynomials. 

2. A := k[9] = k[x]/f(x); H := A* /A* 2 

3. W := - 9) + ^ in H : x x a root of f(x) in k 

4. - 9 in H 

5. G := {51, . . .,g m } 

6. call SquareClasses(0, 0, G, —1) 

7. if n is even: / := f x n +■■■ + /„ else / := ./o^" +1 + • • • + /„£ 

8. Let G consist of a factorisation of / into irreducibles. 

9. fi: x^f x(l — x9) 

10. if n is odd or /„ is a square: Add 1 to W 

11. if n is even and /„ is a square: Add x to G 

12. call SquareClasses(0, 1, G, —1) while using / and ji instead of / and fi. 

13. return W 

Explanation: 

ad 2. The algorithm we describe determines fi(C(k)) for fi : C(K) — » A* /A* 2 at no extra cost. If 

n is even, we need to take the image under the map A* /A* 2 — ► A*/A* 2 fc* in order to find a 

proper interpretation of the computed set. 
ad 3. We initialize W with the images of the degree 1 Weierstrass points under [i. Thus, when 

we call SquareClasses and find ourselves with c\ — and G\ non-empty, then the possible 

image under /1 has already been accounted for. 
ad 4. We initialize /x with the definition that works for most points, for use in SquareClasses. (See 

step 10 for why we are explicit about this here.) 
ad 6. We now call SquareClasses to add to W the images /i(-P) of points P G C(k) with x(P) G O. 

Given that G consists of the full factorization of /, the value of Co passed to SquareClasses 

is irrelevant. We pass the dummy value of —1. 
ad 7. Note that for the remaining points, we have l/x(P) G nO. Therefore, by making a change 

of variables z = 1/x and w = y/x^™/ 2 l , we are left with finding the images of the points on 

w 2 = foz n + ••• + /« if n is even or w 2 = ,foz n+1 + • • • + f n z if n is odd, 
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with z £ ttO under \i : z — ► (1/z — 6) = z{\ — zff) modulo squares, for non-Weierstrass 
points, except for oo + and oo~ . 

ad 10. If n is odd or /„ is a square, then there are points P G C(k) with x(P) = oo and hence 
z(P) = 0. We know that for such points, n(P) = 1, so we add that value to W. 

ad 11. If n is even and f n is a square, then oo + and oo - are rational points. However, the definition 
of \x does not yield the correct value for these points, since z(cx) ± ) =0. As a workaround, 
add x to G, so that the recursive search does not try to evaluate step 9 of SquareClasses for 
these points. The correct value has already been added to W in step 10. 

ad 12. We now call SquareClasses to add to W the images of points P G C(k) with l/x(P) £ 
ttO. The nature of G ensures that the value passed to cq is irrelevant, so we pass a dummy 
value of —1. Together with steps 3, 6, and 10, this guarantees that after this, W equals 

KC(k)). 

5. Computing the local image of fi at real places 

If k is a completion of a number field at a complex place, then A* — A* 2 for all A = k[x]/ f{x) 
with f{x) a square-free polynomial. Furthermore C(k) is non-empty for all curves G. In this case, 
n(C{k)) = Hk — {1}, so there is nothing to do. 

Now suppose that k = R and that 

f(x) = {x-9 l )---{x-9 r )g{x) 

where Q\ > 6 2 > ■ ■ ■ > r are the real roots of f(x) and g(x) is a polynomial with no roots in K. 
Then A* I A* 2 = (R*/R* 2 ) r ~ (Z/2Z) 2 and 

H : C(R) -> R*/R* 2 x ■ ■ • x R*/R* 2 
(x,y) >-> (x — 9x,-'-,x- r ) 

Due to the ordering on the $i, we have that if x — 6i < then x — 9 j < for j < i. For a point 
P G C(R) we have f(x(P)) > 0, so if /„ > then 

M(C(R))={(1,...,1),(-1 ) -1,1,...,1),...}, 

which is to say, all vectors consisting of an even number of —1 entries followed by 1 entries. Con- 
versely, if /„ < then 

/i(C(R)) = {(-1, 1, . . . , 1), (-1, -1, -1, 1, . . . , 1), . . .}, 

vectors consisting of an odd number of —1 entries followed by 1 entries. 

Note that, if n is even, we have to quotient out by the subgroup generated by (— 1,...,— 1), 
consisting of the image of R* in A* /A* 2 . 

While the computation of /x(C(R)) is quite straightforward, the use of this information in com- 
puting Self a ^. (C/fc) for some number field k is one of the most error-prone parts due to precision 
issues. See Remark |6. II for more details. 

6. Computing the fake Selmer set 

In this section, let A; be a number field. We consider the algebra A = k[x]/(f(x)). Let S be the 
finite set of places p satisfying one of: 

• p is infinite 

• p has even residue characteristic 

• / has coefficients that are not integral at p 

• the leading coefficient of / is not a unit at p 

• ord p (disc(/)) > 1 

We write Hk{S) c Hk for the elements S G Hk such that p p (S) is unramified according to Defini- 
tion |4~2] for all places p S. The first part of Lemma [4~3l asserts that Sel^ e (C/fe) C H k (S). It 
is a standard fact from algebraic number theory that the subgroup A(2, S*) C A* /A* 2 of elements 
that are unramified outside S is finite, so Hk(S) is a finite set. This set can be computed, see the 
explanation of the FakeSelmerSet algorithm below. 
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Let T be the union of S with the set of primes p for which 

Vq+^p< 2(2 29 (.g - 1) + 1), where q #O k /pO k . 

The second part of Lemma 14.31 guarantees that for any prime p ^ T we will have p p {H k {S)) C 
p p (C(k p )). Hence 

SelL 2 L(CA) = {S £ H k (S) : p p (S) G M P (C(M) for all p g T}. 

This gives us a way to compute the fake Selmer-set explicitly, 
define FakeSelmerSet(/): 

1. A := k[x]/(f(x)) 

2. Let S be the set of primes of k described above. 
3- if 2 | deg(/): 

4. G :=A(2,S)/k(2,S) 

5. else : 

6. G:=A(2,S) 

7. W := {g g G : N A/k (g) g /„fc* 2 }. if W = 0: return 

8. T := S U "small" primes, as in Lemma B~B1 

9. for p g T: 

10. A p := A®fc p ; H' p := A;/A; 2 . 

11. := Locallmage(/ p ) C iT p or, if p \ oo, use Section[S]to compute W p . 

12. if 2 | deg(/): 

13. ff p := H' p /k* p , W p := image of W p in ff p 

14. else : 

15. Hp := H' p - Wp := 

16. Determine p p : G —> H p . 

17. := {w g : p{w) g Wp}. 

18. return W 

Explanation: 

ad 3. Following Rcmark l2.11 we also account for the situation where / is of odd degree, 
ad 4. From Lemma 1431 it follows that Sel^ e (C/fc) can be represented by values in 

A(2, S)={Se A* I A* 2 : 5 is unramified in (A <g> k p )*/(A ® k p )* 2 for all p <£ S}. 

Let S' D S contain generators for the 2-parts of the class groups of k and the simple factors 
of A. We abuse notation slightly by writing A* s , for the S"-unit subgroup of A* . It is easy 
to verify that 

A(2, S') = A* s ,/A* s 2 , and that A(2, S) C A(2, S'). 

Determining A(2,S) C A* s ,/A*g, is a matter of F2-linear algebra. 

In practice, determining A* s , is the bottle-neck in these computations, because it requires 
finding the class groups and unit groups of the number fields constituting A. 

(2) 

We write G for the classes representable by A(2, S). It is clear that Se\ fa l_ c (C / k) C G and 
that G is an explicitly computable finite group, 
ad 7. In all cases, the norm map induces a well-defined homomorphism G — > k*/k* 2 , because 
JV4 /fc (fc*)cfc* 2 if2|deg(.f). 

(2) 

Furthermore, it may happen that W is empty in this step. Since p(C(k)) C Self al ^ c (C '/ k) C 
W, this implies that C(k) is empty, 
ad 8. As remarked in Lemma 14.31 we may obtain information at primes of good reduction, if the 
size of the residue field is small. The probability that these larger primes make a difference 
is rather small, and in practice they often don't. 

The theoretical size of T grows extremely quickly: If C is of genus 2 then T should include 
all primes of norm up to 1153 and for genus 3 all primes up to norm 66553. 

If it is infeasible to work with the full set T, one can work with a smaller set of primes. 
The set we compute can then be strictly larger than Self a i e (C/fc). 
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ad 11. In practice, W will be a rather small set and the only reason we want to compute W p is 
to reduce the size of W in step 17. Especially for large residue fields, Locallmage can be 
extremely expensive. By integrating steps 11 through 17, one can detect early if W p is big 
enough to cover all of p{W). In that case, one does not have to compute the rest of W p and 
can continue with the next p. This makes an immense difference in running time in practice. 

ad 12. Note that the implementation of Locallmage only produces a set of representatives in A* /A* 2 
for n P (C(kp)). We still have to quotient out by k* if 2 | deg(/). 

ad 16. Since G is a finite group, p p can simply be computed by computing the images of the 
generators. However, one should take care that the generators of G in A are represented 
by S'-units. Algorithms naturally find these with respect to a factor basis and writing the 
generators in another form may be prohibitively expensive. One should instead compute 
the images of the factor basis and take the appropriate linear combinations in an abstract 
representation of the multiplicative groups. 

Remark 6.1. As is noted in Section [3 the computation of /j, v (C(k v )) is quite straightforward for 
real places v. The difficulty is in computing the map p v : Hk{S) — ► Hk v . Any first approach would 
probably involve representing Hk(S) using generators of the ring of S'-units in Ak- Their images 
in real completions can lie very close to 0, making it necessary to compute very high precision 
approximations to their real embeddings. As is remarked ad 16 above, a better approach is to 
determine the signs of a factor basis and use the fact that Hu v lies in a group to compute the images 
oiH k (S). 

7. Proving non-existence of rational points 

(2) 

One of the most important applications of computing Seli l (C/k) is that, if it is empty, we can 
conclude that C(fc) is empty. This may even be the case if C does have points everywhere locally 
and so it allows us to detect failures of the local-to-global Principle. 

Example 7.1. Consider the hyperelliptic curve 

C : y 2 = 2x 6 + x + 2. 
Then C(Q) is empty, but C has points everywhere locally. 

Proof. It is straightforward to check that C does have points everywhere locally. In this case, 
A = Q[x]/ (2x 6 + x + 2), which is a number field. Write O for the ring of integers in A. As it turns 
out, we have the prime ideal factorisation 

20 = pq 5 . 

Wehavedisc(2a; 6 + a; + 2) = 2 4 • 11 ■ 271169, so we know that Sel^ c (C/Q) C H k (S) with S = {2,oo}. 

The ideal class group of O is Z/2 and p and q are not principal ideals. Hence, there is no S-unit 
u e A such that N^/q(u) £ 2Q* 2 . Thus, in step 7 of FakeSelmerSet, we will find that W is empty 

and thus that Sel^ e (C/Q) = and therefore C(Q) is empty. □ 

In this example, Hq(S) is empty, so there are no everywhere locally solvable two-covers of C. 
However, Hq is non-empty (the element 2(8 5 — 6> 4 + 8 2 — 8 + 1) e A has norm 18, hence represents 
an element of Hq, for example), so C does have two-covers of the form D$. This raises the following 
question, to which we do not yet have an answer. 

Question 7.2. Can a hyperelliptic curve over a number field k be everywhere locally solvable and 
yet have empty? 

Another example that is worthwhile to illustrate, is that small primes of good reduction can still 
yield information in the fake Selmcr group calculation. 

Example 7.3. Consider the hyperelliptic curve 

C : y 2 = -x 6 + 2x 5 + 3a; 4 - x 3 + x 2 + x - 3 
This curve has points everywhere locally over Q, has good reduction outside 2 and 35783887, and 

(2) 

has no rational points. One can show this by proving that Self a ^ (C/Q) is empty, but one needs to 
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consider this curve locally at 73. In particular, this shows that C has an unramified degree 16 cover 
over Q73, with good reduction and no F73-points in the special fiber. 



Proof. In this case the algebra A is a number field with trivial class group. We write O for its ring 
of integers. We have 



disc(-a; 6 + 2a; 5 



3x 4 



3) = 2 2 • 35783887 



so in step 2 of FakeSelmerSet, we find that S = {2, 00}. Since the class group of A is represented 
by prime ideals above S, we have A(2, S) = Og/Og 2 , so generators are represented by a system of 
fundamental units together with generators of the prime ideals above 2: 



u 
u\ 

U-2 

P2 
?2 



a 



-1 

9 5 - 26> 4 - 4<9 3 + 29 2 + 39 - 1 
9 5 - 3(9 4 + 9 2 - 29 + 2 
6 i - 9 3 - 1 

6»-l 
2/(9 -l) 2 



N A/q(a) 



1 
1 

-1 
-1 
-2 
16 



In Step 7 we find that W is represented by {112, 1*3, U1U2, U1W3}. 

For p — 00, the set W does not get reduced. Note that A has only two real embeddings, 
corresponding to 9 i— > 0.85 and 9 1— > 2.94. Since all representatives in W have norm — 1, we see that 
the real embeddings of these elements will be of opposite sign, and since we are working modulo Q* , 
we can choose which is positive. On the other hand, since the leading coefficient of / is negative, 
the algorithm in Section [5] predicts that /u(C(M)) = {(—1, 1)}, which corresponds to the description 
above. 

For p = 2 the set W does get reduced. We find that if (x,y) £ C(Q 2 ) then x £ 2 2 + 0(2 3 ). It 
is only for 8 = U1U3 = —9 5 — 9 A + 1 that we have that 8 £ (4 — 9 + 0(2 3 ))Q2 modulo squares in 
(A (g) Q2)*, so if there is a point P Q e C(Q) then (i(P Q ) = uiu 3 . 

For p = 73, we find in step 17 of FakeSelmerSet that U1U3 does not map into the image of C((Q>73) 
and hence that C(Q) is empty. □ 



8. Applications to curves with points 

Let k be a number field and let C : y 2 — f(x) be a curve of genus at least 2 over k. Even if C(k) is 
(2) 

non-empty, the set Self a ^ e (C/fc) still contains useful information. If rank(Jacc(fc)) < genus(C) and 
Jacc(fc) is actually known, then one can use explicit versions of Chabauty's method [Tll[T3l[T4j to 
compute a bound on #C(k). In fact, if one combines this with Mordell-Weil sieving [5J[71[n5], then 
one would expect that one should be able to arrive at a sharp bound |17j . 

If rank(Jacc(fc)) > genus(C) then one can try to pass to covers. One chooses an unramified 
Galois cover D/C. By the Chevalley-Weil theorem [T2] , the rational points of C are covered by the 
rational points of finitely many twists D$/C of D/C. For hyperelliptic curves C, a popular choice 
is the 2-cover D$ described in Section [3] 2,3,[B]. The genus of D$ is much larger than the genus of 
C. This means that it is possible that rank(Jac£> iS (fc)) < genus(_D,j) for all relevant 8 and thus that 
Chabauty's method can be applied to each Dg. 

The curve D$ is usually of too high genus to do computations with directly. However, over k, 
the curve Dg covers many hyperelliptic curves besides C. These arise from factorisations f(x) — 
g(x)h(x), where at least one of g, h has even degree. Suppose that g(x) is monic and that its field 
of definition is L/k, i.e., g(x), h(x) £ L[x]. We write 



E 1 : jyl = g(x) 

K' (V7)y 2 2 = Hx) 
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It is straightforward to see that, for every 6, there is a value of 7 = j(S) £ L* /L* 2 such that, over 
L, we have the diagram 




pi 

Note that Ds(k) maps to C(k) and from there to P 1 (fc). Therefore, Dg(k) maps to 

{PeE 7 (L) :x{P) £P\k)} 

and in order to find which of those points correspond to points in C(k) we only have to find which 
points in P 1 (fc) n x(E~(L)) lift to C(k). There is ample literature on how to perform this last step 
. However, the problem of finding the relevant values for 7 has largely been glanced over. 
This is mainly because in any particular situation, it is quite easy to write down a finite collection 
of candidates for 7 and then test, for every place p of k and any extension q of p to L, for each value 
if x{E 1 {L q )) nP 1 (fc p ) is non-empty. In fact, this is quite doable for the fibre product E 1 x P i E^ too 
(see [H Appendix A]). 

However, the smallest set of values for 7 we can hope to arrive at through local means, is 

MS) : 5 £ Se]£l(D/k)}. 

Also, note that the degree of L over k will usually be larger than the degree of A. For instance, if 
C : y 2 = f(x) where f(x) is a sextic with Galois group over k, the the field L over which / factors 
as a quadratic times a quartic is of degree 15, while A is of degree 6. Hence, from a computational 
point of view it is interesting to avoid as much computation as possible in L. 

The map S <— > ~f(5) is in fact straightforward to compute, given representatives 5 £ A — 
k[x]/(f(x)). Let L[Q] = L[x)/ (g(x)). Then there is a natural fc-algebra homomorphism j : A — > L[Q] 
given by 1 ^ . Using these definitions we have 

7 (£) = N L[e]/L (j(5)). 

While the degree of L[Q] is probably quite high, we only need to compute a norm with respect to 
it. This is not such an expensive operation. 

The following example illustrates how the computation of the fake 2-Selmer set fits in with the 
standard methods for determining the rational points on hyperelliptic curves. 

Example 8.1. Let 

C : y 2 = 2x 6 + x 4 + Sx 2 - 2. 

then C(Q) = {(±1,±2)}. 

Proof. First we observe that C covers two elliptic curves, vf = 2u\ + u\ + 3ui — 2 and v 2 = 

—2^2 + 31*2 + U2 + 2, but each of these curves has infinitely many rational points. When we apply 

(2) 

FakeSelmerSet to this curve, we find that Self a ^ e (C/Q) is represented by { — 1 — 9, 1 — 6}, so it is equal 
to jtt(C(Q)). Putting L — Q(a), where a 2 + a + 2 = 0, we obtain the factorization: 

C : y 2 = f(x) = {2x 2 - \){x 2 - a)(x 2 + a + 1) 

We choose g(x) = (x 2 - \){x 2 -a) and h(x) = 2{x 2 + a + 1). We find that 7(1 - 6) = - 6) = 
|(1 — a) and write E : y\ = (1 — a)(2x 2 — l){x 2 — a). Any point (x, y) £ C(Q) must correspond to 
a point (x,y±) £ E(L) with x £ Q. The curve E is isomorphic over L to the elliptic curve 

E : vl = u 3 + (1 - a)u 2 + (2 - 9a)u + (16 - 2a), 
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which has E(L) ~ (Z/2) x Z. This makes methods as described in [U[T5] applicable and a p-adic 
argument at p = 5 proves that x(E(L)) n P X (Q) = {±1}. □ 

9. Applications to genus 1 curves 

In this section we illustrate how the computation of Self a ^ (C/fc) yields interesting results even 
when C is a genus 1 double cover of P 1 . We recover well-known algorithms for doing 2-descents and 
second 2-descents on elliptic curves. To our knowledge, nobody took the effort yet of implementing 
second descent on elliptic curves over number fields, whereas our implementation [9] in MAGMA for 

computing SeqJ. e (C/k) does work if k is a general number field. We illustrate the use by giving an 
example of an elliptic curve over Q(y/2) with non-trivial Tate-Shafarevich group. 
If we have a genus 1 curve of the form 

E : y 2 — f(x) — x 3 + a%x + a^x + a^, 

then Self^ (E/k) = Sel^ 2 \E/k) is equal to the usual 2-Selmer group of E. In this case, the algorithm 
presented in Section [6] could be improved by using the fact that the sets computed in Local I mage 
are groups of known size. One recovers an algorithm to compute the 2-Selmer group of an elliptic 
curve very similar to [lOj . 

Following Section [3] for every S 6 Ser'(E/k), we can write down an everywhere locally solvable 
cover Dg. The model we obtain is the intersection of two quadrics in P 3 . The pencil of quadrics 
cutting out Ds contains a singular quadric Qq over k, however. Since Dg{k p ) is non-empty for every 
p, the Hasse principle for conies mandates that Qq contains a line over k and thus that the lines on 
Qo form a P 1 over k. By sending a point on Ds to the line on Qq that goes through that point, we 
realise Ds as a double cover of a P 1 and we obtain a model of the form 

C s : Y 2 = F 4 X 4 + F 3 X 3 + ■ ■ ■ + F 

where we know that Cs is everywhere locally solvable. 

(2) 

Note that Cs itself is again a curve of genus 1. We can compute Sel {a l. c (Cg/k) in this case as 
well. The data obtained is the same as that obtained by doing a second 2-descent, along the lines 
of [15] . In this case too, the algorithm could be optimised a bit by observing that SeV 2 '(Cs/k) 
maps surjectively to the fiber over 6 with respect to Sel {4) (E/k) -> Sel (2) (S/fc); the fibers of the 
map Sel (2) (C a /fe) -► Sel (4) (£;/fc) arc isomorphic to E(k)[2]/2E(k)[4] (see section 6.1.3 in [23]). Thus 
Sel^ 2 -* (Cg/k) is either empty or has a known cardinality. Similarly, in Local I mage, the fact that 
the set W carries a (fc p ))-action and is of known cardinality can speed up the computation 

immensely. 

Example 9.1. Let a = v2 and consider 

E : y 2 = x 3 + (2 - 2a)x + (2 - 9a) 
Then UI(E/Q(a)) is non-trivial. 

Proof. We find that 5 = 9 2 + (8 — 4a) 9 + 13 — 6a is in Sel£ 2 ^ e (£'/Q(a)). The corresponding cover of 
E can be given by the model 

C : Y 2 = -(2a + i)X i + (4a + 6)X 3 - (18a + 2A)X 2 + (16a + 2A)X + 2a + 4 . 

It turns out that Sel[ 2 ^. c (C//c) is empty. Hence, it follows that 5 € Se\^ 2 \E/k) is not in the image 
of fj,(E(k)) and therefore represents a non-trivial member of LU(i?/Q(a))[2]. In fact, we have shown 
that 5 represents an element of UI(E/Q(a)) that is not divisible by 2. □ 

10. Efficiency of two-cover descent 

(2) 

It is natural to ask how often we should expect that SeqJ, (C/k) is empty if C(k) is. This is 
equivalent to determining what proportion of curves C over k have an everywhere locally solvable 
two-cover (see Theorem I3.4|) . To quantify this question, let us limit ourselves to curves C of genus 
2 and k = Q. We define a naive concept of height on the set of genus 2 curves over Q so that we 
can define the proportion we are interested in as a limit. 
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Definition 10.1. Let M(D) be the set of genus 2 curves over Q of the form 

y 2 = /(*) 

where f(x) = f 6 x 6 + ■ ■ ■ + fo E Z[x] and < D for i = 0, . . . , 6 

Note that (especially when D is large) an isomorphism class of a curve may be represented by 
many different models in M(D). 

It would be perhaps more natural to order the curves by |disc(/)| rather than maximal absolute 
value of the coefficients. Our motivation for partitioning the set of genus 2 curves by M(D) is that 
one can easily sample uniformly from M{D), whereas this is much more complicated otherwise. 

A related question has a definite answer. In [20l[2T] it is proved that there is a well-defined 
proportion of genus 2 curves over Q that have points everywhere locally. In fact, if one actually 
computes the local densities involved, one arrives at 

,. 4{Ce M(D) : C(Q P ) ^ for ah>} 

JToc mm 

On the other hand, one would expect that the proportion of curves that actually have a rational 
point vanishes as D grows: 

#{C 6 M{D) : Cm £ 0} t 
D^oo #M(D) 

Heuristic considerations suggest that the quantity under the limit should be of order D^ 1 / 2 . We are 
interested in the question whether the following limit exists and what might be its value: 

u #{C € M(D) : Sel[l(C/Q) f 0} 
D™oo #M(D) 

To this end, we tested if Sel^jj. c (C/Q) = for a fairly large number of curves, sampled from M(D) 
for various D. For D = 1, 2, 3 we considered all of M{D) (see [5]) and our results are unconditional 
for all but 42 of the roughly 200000 isomorphism classes of curves involved. In the table below, 
these curves are counted according to isomorphism class. 

For D = 4, . . . , 60 and for D = 100 we have sampled curves C from M(D) uniformly randomly 
and computed the following: 

• Whether the curve has a small rational point (whose x-coordinate is a rational number with 
numerator and denominator bounded by 10 000 in absolute value), 

• Whether the curve is everywhere locally solvable, 

• Whether Sel^ e (C/Q) = 0, where for reasons of efficiency, the class group information 
needed to compute A(2, S) was only verified subject to the generalized Riemann hypothesis. 

This places each curve in one of the four categories 

9 ) = for some place v 

) 

^fakc 



(2) 

Selfakc^/'QO = ^ (but C does have points everywhere locally) 



contains a small point 
• It is unknown whether C has a rational point or not. 

See Table Q] for the statistics and Figure Q] for a graph of the data. It should be noted that the 
samples for the various D are not completely independent: Any curve sampled from M(D) that 
happened to have all its coefficients bounded by D' < D was also included as sample from M(D'). 

We make a number of observations. 

(1) The proportion of curves with a local obstruction against rational points tends to a value 
near 15% remarkably quickly. 

(2) As D increases, the proportion of curves in M(D) with a small rational point decreases in 
the expected way. The jumps that can be observed at D = 4, 9, 16, . . . come from additional 
possibilities for points at infinity or with x — that occur when the leading or trailing 
coefficient is a square. 
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= 


c i( 2 ) 
Sel fakc 


[C/Q) ^ 




D 


local obstruction 






C(Q) ? 


total 


1 


45 


3 





401 


449 


2 


2823 


1096 


29 


14116 


18064 


3 


29403 


27786 


1492 


137490 


196171 


10 


5903 


9915 


1546 


20242 


37606 


20 


2020 


4748 


1012 


5393 


13173 


30 


2717 


6675 


1579 


5959 


16930 


40 


4025 


10648 


2682 


7963 


25318 


50 


18727 


51831 


13538 


34269 


118365 


60 


1589 


4571 


1278 


2547 


9985 


100 


8106 


24063 


7045 


10786 


50000 



Table 1. Statistics on genus 2 curves 



U rational points [] not ELS 



| 2-cover obstr. || remaining 



10 15 20 25 30 35 40 45 50 55 60 100 size 



Figure 1 . Proportion chart of obstructions 



(3) The proportion of curves with Self a £ e (C/Q) non-empty decreases more slowly. Figured] 

(2) 

clearly shows that, at least for C £ M(100), testing if Self a ^ c (C/Q) = is a very useful 
criterion to decide if C(Q) is empty, with less than 15% of undecided curves. 

(4) The data is inconclusive on a possible limit value for the proportion of curves C S M(D) 

(2) 

with Self a k e (C/Q) = as D — > oo, but it suggests that it might be somewhere between 65% 
and 85%. It would be very interesting to find out if this limit exists and what its approximate 
value might be. What makes this likely to be hard is the subtle interplay between local and 

(2) 

global information that determines the size of Sel fa] ^ c (C7/Q). 
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